Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C7DCE2087C611EFA0351BB5762E951A.roa
File: 7C7DCE2087C611EFA0351BB5762E951A.roa (raw, json)
Hash identifier: vpSJFDhk9I1xq3YM6J6YCSu3rApK17ddiJoiFD/25fc=
Subject key identifier: 50:BF:BF:84:C0:34:25:49:A7:5B:7B:DD:75:F5:46:2F:9E:FA:6C:BC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: FD6C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C7DCE2087C611EFA0351BB5762E951A.roa
Signing time: Fri 11 Oct 2024 11:46:43 +0000
ROA not before: Fri 11 Oct 2024 11:46:40 +0000
ROA not after: Sun 12 Oct 2025 11:46:40 +0000
asID: 136907
IP address blocks: 154.86.48.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64876 (0xfd6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 11 11:46:40 2024 GMT
Not After : Oct 12 11:46:40 2025 GMT
Subject: CN=67091023-80a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:47:83:46:23:95:bf:83:68:ff:e0:1b:d1:92:
66:f6:3c:c3:6e:87:e8:72:39:5e:22:ab:90:88:6f:
98:c7:15:11:f6:c4:0f:31:2e:2f:56:91:67:82:ca:
bb:e7:9c:60:10:6a:39:d2:64:94:f0:e5:d5:ff:90:
85:c0:96:ec:cc:76:a7:64:4b:cb:05:fe:84:c2:da:
b1:05:43:57:8a:36:7e:68:0d:e9:57:25:81:7b:40:
83:8b:fb:0a:af:b4:84:05:dd:7c:dc:c6:b4:64:cf:
e6:1d:ed:76:54:8f:2e:f5:27:03:bd:a0:b9:02:46:
c7:81:b4:0a:f9:b8:c9:57:2a:9e:0a:d9:5e:b3:36:
ad:27:c7:cc:29:19:37:5b:bd:55:1d:d6:cb:6e:68:
f4:1a:b0:ec:b7:de:fc:31:6c:0c:58:0a:3b:bd:73:
be:82:60:5e:eb:ce:f5:b8:40:c3:12:c2:88:5e:a2:
06:0f:ab:ff:72:0d:f0:23:5f:15:73:30:77:7c:65:
29:52:6e:81:5f:25:c7:59:0a:a7:dd:37:2d:18:91:
b7:bf:4f:a9:21:1c:82:b7:9d:87:22:ef:56:ec:66:
76:9d:32:68:7c:09:da:70:7b:18:5e:c3:fe:13:02:
52:47:76:3e:21:86:ca:3d:6f:5d:f4:22:dd:f5:1b:
2b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:BF:BF:84:C0:34:25:49:A7:5B:7B:DD:75:F5:46:2F:9E:FA:6C:BC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C7DCE2087C611EFA0351BB5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.48.0/20
Signature Algorithm: sha256WithRSAEncryption
10:84:1b:26:9f:c1:68:4c:7d:df:5f:ab:bd:0f:06:96:67:22:
37:8c:d5:4b:fc:f1:5c:71:e7:88:55:5e:93:89:de:d8:bc:a4:
e6:9f:ac:d8:53:23:7c:a8:76:d0:ee:55:00:47:aa:45:c9:85:
63:5f:5c:73:24:60:d4:09:0d:8d:36:8f:00:cc:e9:c5:91:2e:
ef:7b:85:d8:38:23:e7:bb:f4:c4:32:eb:9d:a6:61:42:52:fa:
72:0c:8f:d3:43:73:a8:6c:6e:c1:65:fa:2a:d0:4f:d5:b6:eb:
a7:3b:9c:46:8a:60:a5:3e:84:a3:5e:ca:83:69:62:df:26:1b:
0c:0e:77:15:ad:89:9f:4c:e1:17:19:26:2c:ff:80:6f:00:8c:
7d:ba:8a:24:87:01:93:13:00:a3:96:8e:7f:a4:35:13:21:e9:
69:7d:e8:72:2e:8d:3c:8c:25:eb:0e:6f:fa:c3:26:b0:c6:40:
d0:ec:92:1a:e4:d3:aa:d2:28:63:06:76:72:6c:eb:e9:09:c9:
43:8a:46:c8:b7:35:c4:dd:3d:50:d8:02:52:2d:3e:72:b0:85:
36:5e:55:5a:82:0c:71:aa:cc:b2:7b:c3:53:6f:e8:14:dc:8c:
a1:72:5b:cf:18:0b:ee:ee:6e:96:9d:c2:bd:d7:42:7f:7b:37:
80:6a:17:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:12 2024 by rpki-client on console-fra.rpki-client.org